• S
    IB: refcount race fixes · 1b52fa98
    Sean Hefty 提交于
    Fix race condition during destruction calls to avoid possibility of
    accessing object after it has been freed.  Instead of waking up a wait
    queue directly, which is susceptible to a race where the object is
    freed between the reference count going to 0 and the wake_up(), use a
    completion to wait in the function doing the freeing.
    Signed-off-by: NSean Hefty <sean.hefty@intel.com>
    Signed-off-by: NRoland Dreier <rolandd@cisco.com>
    1b52fa98
mad_rmpp.c 24.5 KB